{"instruction": "You are an expert in event extraction. Please extract events from the input that conform to the schema definition. Return an empty list for events that do not exist, and return NAN for arguments that do not exist. If an argument has multiple values, please return a list. Respond in the format of a JSON string.", "schema": [{"event_type": "patch vulnerability", "trigger": true, "arguments": ["releaser", "patch", "time", "issues addressed", "common vulnerabilities and exposures", "vulnerable system", "vulnerability"]}, {"event_type": "ransom", "trigger": true, "arguments": ["victim", "time", "damage amount", "place", "payment method", "tool", "price"]}, {"event_type": "phishing", "trigger": true, "arguments": ["attack pattern", "trusted entity", "damage amount", "time", "victim", "attacker", "tool", "purpose", "place"]}, {"event_type": "discover vulnerability", "trigger": true, "arguments": ["time", "discoverer", "capabilities", "vulnerable system version", "vulnerability", "supported platform", "vulnerable system owner"]}, {"event_type": "data breach", "trigger": true, "arguments": ["damage amount", "number of data", "time", "number of victim", "victim", "place", "tool", "attacker"]}], "input": "According to Cisco , instead of using malvertising or spam campaigns , crooks buy legitimate ads via the Google AdWords platform and place links to their phishing sites at the top of Bitcoin - related Google search results ."}
{"patch vulnerability": [], "ransom": [], "phishing": [{"trigger": "place links", "arguments": {"attack pattern": "buy legitimate ads via the Google AdWords platform", "trusted entity": "NAN", "damage amount": "NAN", "time": "NAN", "victim": "NAN", "attacker": "crooks", "tool": "their phishing sites", "purpose": "NAN", "place": "NAN"}}], "discover vulnerability": [], "data breach": []}